Server: nginx/1.12.0 X-Request-Id: 704761f8c68e73ccb374ca5371194aae Status: 200 OK X-XSS-Protection: 1; mode=block X-UA-Compatible: IE=edge Expires: Thu, 22 Feb 2018 20:53:55 GMT Date: Thu, 22 Feb 2018 20:48:55 GMT Cache-Control: max-age=300 X-Runtime: 5.100650 X-UA-Compatible: IE=Edge,chrome=1 Content-Length: 42143 Connection: keep-alive Access-Control-Allow-Origin: http://www.sunshinesucculents.com.au http://assets1.sunshinesucculents.com.au Content-Security-Policy: default-src 'self'; connect-src 'self' http://www.sunshinesucculents.com.au http://*.hotjar.com:* https://*.hotjar.com:* ws://*.hotjar.com wss://*.hotjar.com sumome.com *.kxcdn.com *.zopim.com wss://*.zopim.com https://translate.googleapis.com https://r13---sn-ntq7en7y.googlevideo.com https://www.youtube.com https://youtube.com http://youtube.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.facebook.com https://ajax.googleapis.com https://trkcall.com http://*.hotjar.com https://*.hotjar.com https://tagmanager.google.com https://s.adroll.com *.sumome.com *.googlecommerce.com *.googlecommerce.com *.kxcdn.com *.gtp.com.au http://tracking.gtp.com.au https://tracking.gtp.com.au *.zopim.com *.addthis.com http://static.mobilewebsiteserver.com https://translate.googleapis.com static.tacdn.com *.vimeo.com *.tripadvisor.com http://www.jscache.com *.facebook.net *.googletagmanager.com *.twitter.com http://platform.linkedin.com https://platform.linkedin.com http://www.jscache.com http://translate.google.com http://www.gstatic.com/ *.pinterest.com *.weatherzone.com.au http://rtsys.rtrk.com.au http://d.adroll.com http://www.youtube.com *.googleadservices.com http://www.googleadservices.com http://a.adroll.com http://vxml4.plavxml.com http://vxml4.plavxml.com.au *.pinterest.com *.sunshinesucculents.com.au *.gtp-icommerce.com.au/ https://ssl.google-analytics.com *.google-analytics.com https://assets.zendesk.com *.facebook.net; img-src 'self' data: https://loremflickr.com *.kxcdn.com http://*.hotjar.com https://*.hotjar.com https://d.adroll.com https://ads.yahoo.com https://x.bidswitch.net https://us-u.openx.net https://ib.adnxs.com https://idsync.rlcdn.com https://cms.gtp-icommerce.com.au http://cms.gtp-icommerce.com.au *.gtp.com.au *.zopim.com *.addthis.com *.vimeo.com *.twitter.com *.crossfit.com *.doubleclick.net *.static.tacdn.com *.tripadvisor.com https://translate.googleapis.com *.google.com *.google.com.au https://www.gstatic.com https://www.paypalobjects.com *.www.paypalobjects.com http://www.semrush.com https://ssl.gstatic.com *.pinterest.com https://s-passets.pinimg.com *.twitter.com https://plus.google.com http://maps.googleapis.com https://maps.googleapis.com http://data.weatherzone.com.au http://wz5.resources.weatherzone.com.au http://rtsys.rtrk.com.au *.google-analytics.com *.pinterest.com *.sunshinesucculents.com.au http://vsrv1assets2.gtp.com.au http://vsrv1assets1.gtp.com.au cms.gtp-icommerce.com.au https://ssl.google-analytics.com *.facebook.com https://assets.zendesk.com *.googleadservices.com; style-src 'self' 'unsafe-inline' https://tagmanager.google.com *.kxcdn.com *.addthis.com *.vimeo.com *.tripadvisor.com static.tacdn.com https://translate.googleapis.com *.sunshinesucculents.com.au http://assets1.sunshinesucculents.com.au http://fonts.googleapis.com/ https://fonts.googleapis.com https://assets.zendesk.com; font-src 'self' data: http://*.hotjar.com https://*.hotjar.com *.kxcdn.com *.zopim.com https://fonts.gstatic.com http://fonts.gstatic.com *.sunshinesucculents.com.au https://themes.googleusercontent.com; child-src 'self' https://payway.feesynergy.com.au https://*.hotjar.com *.googlecommerce.com *.googlecommerce.com *.kxcdn.com *.audioacrobat.com *.renewtrust.com *.addthis.com *.vimeo.com http://brightgreen.com https://brightgreen.com *.tripadvisor.com *.facebook.com *.facebook.com https://app.wodify.com *.googletagmanager.com *.twitter.com http://platform.linkedin.com https://platform.linkedin.com http://maps.google.com.au https://maps.google.com.au https://www.google.com http://www.google.com http://www.google.com.au http://googleads.g.doubleclick.net https://www.youtube.com http://www.youtube.com https://assets.zendesk.com *.facebook.com *.facebook.com https://tautt.zendesk.com; object-src 'self' https://*.hotjar.com *.kxcdn.com *.zopim.com *.googletagmanager.com *.twitter.com http://platform.linkedin.com https://platform.linkedin.com *.gtp-icommerce.com.au https://www.youtube.com http://www.youtube.com http://youtube.com X-Content-Type-Options: nosniff Content-Type: text/html; charset=utf-8 HTTP/1.1 200 OK Age: 0 ETag: "eedfa6470ff7d42ddfd5e693fe13753a" Vary: Accept-Encoding X-Rack-Cache: miss, ignore, store X-Content-Digest: 47f83ce7ad5120dc03caef5e953abfdb7b5005ec X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubdomains;